Privacy preserving tag

Patent metadata

Field	Value
Publication number	US-10826707-B2
Application number	US-201715784627-A
Country	US
Kind code	B2
Filing date	Oct 16, 2017
Priority date	Oct 16, 2017
Publication date	Nov 3, 2020
Grant date	Nov 3, 2020

Abstract

A privacy preserving tag and methods for reading the same are disclosed. An authentication and tracking method and system for the privacy preserving tag is also disclosed. The method includes storing information in memory of a tag, receiving a read response at the tag from a reading device, and responding to the read request by generating a response at the tag that includes a combination of a base resource identifier as well as a privacy identifier. The privacy identifier is provided to support privacy characteristics of the tag while enabling establishment of a personalized portal at a remote system.

First claim

What is claimed is:

1. A method, comprising:
storing a base resource identifier in memory of a tag;
storing one or more privacy encryption keys in the memory of the tag;
storing a unique tag identifier in the memory of the tag, wherein the unique tag identifier uniquely identifies the tag;
storing a privacy key index in the memory of the tag, the privacy key index identifying a particular privacy encryption key from the one or more privacy encryption keys;
receiving, at the tag, a read request from a reading device;
generating a response to the read request that includes a combination of the base resource identifier as well as a privacy identifier, wherein the privacy identifier is determined with the particular privacy encryption key identified by the privacy key index, the privacy key index, and an encrypted tag identifier created by encrypting the unique tag identifier with the particular privacy encryption key identified by the privacy key index and an initialization vector; and
transmitting the response to the reading device.

2. The method of claim 1 , wherein the initialization vector is determined, at least in part, by a random or pseudo-random number generated by the tag.

3. The method of claim 2 , further comprising:
receiving the response at an authorized entity;
extracting, at the authorized entity, the privacy key index from the response;
using the extracted privacy key index to identify a symmetric privacy encryption key to use for decrypting the encrypted tag identifier contained in the privacy identifier;
decrypting, at the authorized entity, the encrypted tag identifier with the symmetric privacy encryption key; and
identifying, at the authorized entity, the tag or a holder of the tag with the unique tag identifier.

4. The method of claim 1 , wherein the initialization vector is determined, at least in part, by a one-time password generated by the tag.

5. The method of claim 4 , further comprising:
receiving the response at an authorized entity;
extracting, at the authorized entity, the privacy key index from the response;
using the extracted privacy key index to identify a symmetric privacy encryption key to use for decrypting the encrypted tag identifier contained in the privacy identifier;
decrypting, at the authorized entity, the encrypted tag identifier with the symmetric privacy encryption key;
identifying, at the authorized entity, the tag or a holder of the tag with the unique tag identifier; and
authenticating the tag by computing a hash-based message authentication code and comparing the hash-based message authentication code against a number of read attempts of a counter value and a one-time password key stored against the unique tag identifier in an internal database; and
incrementing the counter value by a defined window.

6. The method of claim 1 , wherein the privacy identifier is determined by a combination of the following: (i) the initialization vector (ii) the encrypted tag identifier; and (iii) a message authentication code computed by encrypting the encrypted tag identifier with a message authentication code encryption key;
wherein the initialization vector is determined, at least in part, with a randomly or pseudo-randomly generated number, the message authentication code encryption key, and a determination of a block cipher length; and
wherein the encrypted tag identifier is created by further encrypting the unique tag identifier with a concatenation of the unique tag identifier with a tag identifier length value and a random padding.

7. The method of claim 6 , further comprising:
receiving the response at an authorized entity;
extracting, at the authorized entity, the privacy identifier from the response;
parsing the privacy identifier to determine the message authentication code and data to be validated;
parsing the data to be validated to obtain the privacy key index, the initialization vector, and the encrypted tag identifier; and
validating the data to be validated by using the message authentication code and a symmetric privacy encryption key corresponding to the privacy key index.

8. The method of claim 7 , further comprising:
performing a fast validation of the message authentication code by using a synthesized initialization vector.

9. The method of claim 1 , wherein the response is in a Universal Resource Locator (URL) format, wherein the base resource identifier is concatenated with the privacy identifier to form the URL, and wherein the URL directs a browser to a web server hosted by an authorized entity.

10. The method of claim 1 , wherein the particular privacy encryption key corresponds to a private key from a symmetric key pair.

11. A privacy preserving system, comprising:
at least one privacy preserving tag that includes:
an interface that enables the at least one privacy preserving tag to exchange communications with a reading device;
a processor; and
memory in which a base resource identifier, a privacy encryption key, a unique tag identifier, and a privacy key index are stored, wherein the privacy key index identifies the privacy encryption key, and wherein the memory also comprises instructions that are executable by the processor when the at least one privacy preserving tag is in communication with the reading device via the interface, the instructions, when executed, enabling the processor to generate a response to a read request issued by the reading device that includes a combination of the base resource identifier as well as a privacy identifier, wherein the privacy identifier is determined with the privacy encryption key, the privacy key index, and an encrypted tag identifier created by encrypting the unique tag identifier with the privacy encryption key and an initialization vector.

12. The system of claim 11 , wherein the initialization vector is determined, at least in part, by a random or pseudo-random number generated by the tag.

13. The system of claim 12 , further comprising an authorized entity enabled to communicate with the reading device and perform the following functions:
receive the response transmitted by the at least one privacy preserving tag to the reading device;
extract the privacy key index from the response;
use the extracted privacy key index to identify a symmetric privacy encryption key to use for decrypting the encrypted tag identifier contained in the privacy identifier;
decrypt the encrypted tag identifier with the symmetric privacy encryption key; and
identify the tag or a holder of the tag with the unique tag identifier.

14. The system of claim 11 , wherein the initialization vector is determined, at least in part, by a one-time password generated by the tag.

15. The system of claim 14 , further comprising an authorized entity enabled to communicate with the reading device and perform the following functions:
receive the response transmitted by the at least one privacy preserving tag to the reading device;
extract the privacy key index from the response;
use the extracted privacy key index to identify a symmetric privacy encryption key to use for decrypting the encrypted tag identifier contained in the privacy identifier;
decrypt the encrypted tag identifier with the symmetric privacy encryption key;
identify the tag or a holder of the tag with the unique tag identifier; and
authenticate the tag by computing a hash-based message authentication code and comparing the hash-based message authentication code against a number of read attempts of a counter value and a one-time password key stored against the unique tag identifier in an internal database; and
increment

Assignees

• Assa Abloy Ab

Inventors

• Hoyer Philip
• Robinton Mark

Classifications

• H04L63/0492 Primary

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• H04L9/0869

  involving random numbers or seeds · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title